Weak Debian OpenSSH Keys in ~/.ssh/authorized_keys

The remote host has one or more /.ssh/authorizedkeys files containing weak SSH public keys generated on a Debian or Ubuntu system. The problem is due to a Debian packager removing nearly all sources of entropy in the remote version of OpenSSL. This problem does not only affect Debian since any us...

Debian and Ubuntu OpenSSL packages contain a predictable random number generator

Overview A vulnerability in the OpenSSL package included with the Debian GNU/Linux operating system and its derivatives may cause weak cryptographic keys to be generated. Description A weakness exists in the random number generator used by the OpenSSL package included with the Debian GNU/Linux...

Debian OpenSSH/OpenSSL Package Random Number Generator Weakness

The remote SSH host key has been generated on a Debian or Ubuntu system which contains a bug in the random number generator of its OpenSSL library. The problem is due to a Debian packager removing nearly all sources of entropy in the remote version of OpenSSL. An attacker can easily obtain the...

DSA-1571-1 openssl - predictable random number generator

Bulletin has no description...

[SECURITY] Fedora 7 Update: pam_ssh-1.92-2.fc7

This PAM module provides single sign-on behavior for UNIX using SSH keys. Users are authenticated by decrypting their SSH private keys with the password provided. In the first PAM login session phase, an ssh-agent process is started and keys are added. The same agent is used for the following PAM...

Portcullis Security Advisory 06-034

Portcullis Security Advisory 06-034 Vulnerable System: Movable Type Vulnerability Title: The blog directory path can be set to any arbitrary directory path during the creation of new blogs. Vulnerability discovery and development: Portcullis Security Testing Services. Credit for Discovery: Tim...

Multiple Lantronix SecureLinx console server vulnerabilities

SSH keys and log files are accessible through Web interface. Unsfae file permissions. Directory traversal. Privilege escalations, buffer overflows...

Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit (perl)

Exploit for linux platform in category remote exploits the debian openssl issue leads that there are only 65.536 possible ssh keys generated, cause the only entropy is the pid of the process generating the key. This leads to that the following perl script can be used with the precalculated ssh ke...